{"id":"CVE-2026-105794","summary":"MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL","details":"MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-path attacker can therefore present a certificate that does not match the intended target hostname and spoof the server in a man-in-the-middle attack. The Schannel backend is not affected. This issue is fixed in versions 2.4.20, 2.5.11, and 2.6.1.","aliases":["GHSA-w5f4-fx9m-m4q7"],"modified":"2026-10-07T07:00:28.307559653Z","published":"2026-10-06T14:14:54.483Z","database_specific":{"cwe_ids":["CWE-295"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105794.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105794.json"},{"type":"FIX","url":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412"},{"type":"FIX","url":"https://github.com/microsoft/msquic/commit/508e811370df93e2ad848f5c78347d4fe4f65a91"},{"type":"FIX","url":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81"},{"type":"FIX","url":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83"},{"type":"FIX","url":"https://github.com/microsoft/msquic/pull/6274"},{"type":"FIX","url":"https://github.com/microsoft/msquic/pull/6275"},{"type":"FIX","url":"https://github.com/microsoft/msquic/pull/6276"},{"type":"FIX","url":"https://github.com/microsoft/msquic/pull/6277"},{"type":"WEB","url":"https://github.com/microsoft/msquic/releases/tag/v2.4.20"},{"type":"WEB","url":"https://github.com/microsoft/msquic/releases/tag/v2.5.11"},{"type":"WEB","url":"https://github.com/microsoft/msquic/releases/tag/v2.6.1"},{"type":"ADVISORY","url":"https://github.com/microsoft/msquic/security/advisories/GHSA-w5f4-fx9m-m4q7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105794"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/microsoft/msquic","events":[{"introduced":"0"},{"fixed":"90fd45498bf9b506b8556fb407088688474d6c81"},{"introduced":"ac75f78962cf6953c8804d96dc3bb96a308e20cf"},{"fixed":"0591586443cc73a2d2cfb679527d91a144b4a412"},{"introduced":"e7e7a114e20a55ec2d5f723cf6bdf3bfb7b0b24a"},{"fixed":"a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"0"},{"fixed":"2.4.20"},{"introduced":"2.5.0"},{"fixed":"2.5.11"},{"introduced":"2.6.0"},{"fixed":"2.6.1"}]}}],"versions":["v2.4.20-rc","v2.6.1-rc","v2.5.11-rc","v2.6.0","v2.5.10","v2.4.19","v2.4.19-rc","v2.5.10-rc","v2.5.9-rc2","v2.5.9","v2.5.9-rc","v2.5.8-rc","v2.5.8","v2.5.7","v2.4.18","v2.5.7-rc2","v2.4.18-rc","v2.5.7-rc","v2.5.6-rc","v2.5.6","v2.4.17-rc2","v2.4.17-rc","v2.4.17","v2.5.5","v2.4.16","v2.4.15-rc","v2.4.15","v2.5.4","v2.5.3","v2.5.2","v2.4.14","v2.5.1","v2.4.13","v2.4.12","v2.4.11","v2.5.0","v2.4.10","v2.4.9","v2.4.8","v2.4.7","v2.4.5","v2.4.4","v2.4.3","v2.4.2","v2.4.1","v2.3.0","v1.9.0","v1.8.0","v1.7.0","v1.6.0","v1.5.0","v1.4.0","v1.3.0","v1.2.0","v0.9.2-draft-31","v0.9.1-draft-30","v0.9-draft-29","v0.9-draft-28","v0.9-draft-27","v0.9-draft-25","v0.9-draft-24","v0.9-draft-23"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105794.json","vanir_signatures":[{"target":{"file":"src/platform/unittest/TlsTest.cpp"},"deprecated":false,"digest":{"line_hashes":["190529008162141799708009311894989821702","49945833656196869453885540150945434197","240524124450448216060827449656816366478","91257123344691728148837863602768079443","237403836532581489718230664295052025186","235872034426344860964942176523135266032","313542066149294581011531232668803980088","41926049001079335579325716158322086043","225174488787581330052660753601017631273","204314134016263375763220441924817197027","64100404404564426831716992642633599978","101080358689592713512731041644183890262"],"threshold":0.9},"id":"CVE-2026-105794-05f938c1","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412"},{"id":"CVE-2026-105794-09c8f2c0","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/tls_quictls.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["134287597387281311588648302175916193140","132186138653283940297463378953855015675","158173015280156532198007978778530725694","152448937488482967724968453697062646821","116930210547921721611052500710254990045","296698397956707875052861079975354248033","88904634897124980992617243322378705317","280952862152733749023652082319333729475","169410300226803907339940690136500277650","160881442166917667476104159329785513964","157401353499416147580878944492770695126","17241265544844300138108826883119312927","25542548114960434192415669117456601176","58074033311342413811708528074702177817","156354493534158514508575082891380273374","214969628370952691540841827419789888756","57947000922596567308920953174130512033","115338438902178924896927901460959755095","298925522054916748398471200540975757167","309986937302843445220244993111067896695","49278384957566386474845589411610443415","304375565020305050345494307985787656357","248064354992889601777371014061056086511","8724631186648362612125521902376482241","286941927591297830538961169344879939166","4224899064433291602629248659039743513","216146416164237824861799873282545240730","275630011976803995010557786185110648425","140150338158300021929609786551180246257","240327671693684159670832865980671257130","11347040696622821002662797286170264855","327411238474074873352486301318029006216","126772323629642261041955826514029152176","230812591877668241189204091950798368013","213496821169164113274952489161060239151","319354718395048939014751376374965820362","176787837626596345107722248069945362369","160381035017522467669829396179563880948","332078036925899180262188696257634037339","84345166944706388818361778978728504115","20589983014229717052633696128117428436","242910252279576104274704746029971821344","41163823320181130683159084667994333981","121850271492855407812476394232441621910","335741974886395752229368851214686559898","228504323551413466829775590636420135905","45369199193105075523387341904567446810","232907548996103240276310266144058582239","270410803697185956359834601143098048387","203472872361562332700267889118844975926","57688369053323526136363022120728713209","39427795427570096711807103609857373283","186222229140646690431008889092131675291","318500756731482834285931996005761600235","194835752330882885337418993007986645757"]}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/unittest/TlsTest.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["190529008162141799708009311894989821702","49945833656196869453885540150945434197","240524124450448216060827449656816366478","91257123344691728148837863602768079443","237403836532581489718230664295052025186","235872034426344860964942176523135266032","313542066149294581011531232668803980088","41926049001079335579325716158322086043","225174488787581330052660753601017631273","204314134016263375763220441924817197027","64100404404564426831716992642633599978","101080358689592713512731041644183890262"]},"id":"CVE-2026-105794-172b01c4"},{"signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/tls_openssl.c","function":"CxPlatTlsUninitialize"},"deprecated":false,"digest":{"function_hash":"245855617085857939058359048570466545042","length":364},"id":"CVE-2026-105794-210c2b41","signature_type":"Function"},{"id":"CVE-2026-105794-215bea39","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/platform/tls_openssl.c","function":"CxPlatTlsUninitialize"},"deprecated":false,"digest":{"function_hash":"245855617085857939058359048570466545042","length":364}},{"source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/platform/unittest/TlsTest.cpp"},"deprecated":false,"digest":{"line_hashes":["190529008162141799708009311894989821702","49945833656196869453885540150945434197","240524124450448216060827449656816366478","91257123344691728148837863602768079443","237403836532581489718230664295052025186","235872034426344860964942176523135266032","313542066149294581011531232668803980088","41926049001079335579325716158322086043","225174488787581330052660753601017631273","204314134016263375763220441924817197027","64100404404564426831716992642633599978","101080358689592713512731041644183890262"],"threshold":0.9},"id":"CVE-2026-105794-29224715","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"35246499858758429590113570444943700145","length":838},"id":"CVE-2026-105794-2968459d","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"function":"TEST","file":"src/platform/unittest/PlatformTest.cpp"}},{"digest":{"function_hash":"245855617085857939058359048570466545042","length":364},"id":"CVE-2026-105794-2bd90ebe","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/tls_quictls.c","function":"CxPlatTlsUninitialize"},"deprecated":false},{"target":{"file":"src/platform/tls_openssl.c","function":"CxPlatTlsCertificateVerifyCallback"},"deprecated":false,"digest":{"function_hash":"288277525431193426427145868415871652585","length":3597},"id":"CVE-2026-105794-30345dcd","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81"},{"source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/core/connection.c"},"deprecated":false,"digest":{"line_hashes":["101965844058963028857030388553504881643","171333103538360201412751063465403915525","277863407262048742721628450424424897077"],"threshold":0.9},"id":"CVE-2026-105794-32e98b1c","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["251707576438163550521663111443963740005","59609594808877942310261754672817014277","35451057074958842101594473147763605221","10810917654345454312946645930966824309","21098551185002868153113158035452118809","56203523631195706439103026281162388210","182545982909703673873316885085610295209","321270477329492656115792472385962607093","86465988439136310946258612707233555198","64466772775965064257444744528737298859","289649748809705219468340952964092804969","231906476503029327498225795449399467705","202060107898569489136915154310938436434","1995224525994155780885478770300155229","253157817983072767972898644654711364530","237243420196661750544785344281646780502","155120796032467735334954334762739940474","139994093875159456735350770909050147131","234022933456030125329376440430701450935","84585480669166784231105463414009337748","268029453855139864628574084750313429310","20959372969725980241151813495193130217","206810151013959743855421699402407101713","211733873019726996756893909873869829137","124591249027170919458162108341945946249","139130291877641806823876584076162233729","122020005674544876471285062544557729067","247814149842132277118377833950303758130","91179368441600999479137103268734767765"]},"id":"CVE-2026-105794-3c134b7b","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/inc/msquic_posix.h"}},{"signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/platform/tls_quictls.c"},"deprecated":false,"digest":{"line_hashes":["134287597387281311588648302175916193140","132186138653283940297463378953855015675","158173015280156532198007978778530725694","152448937488482967724968453697062646821","116930210547921721611052500710254990045","296698397956707875052861079975354248033","88904634897124980992617243322378705317","280952862152733749023652082319333729475","169410300226803907339940690136500277650","160881442166917667476104159329785513964","157401353499416147580878944492770695126","17241265544844300138108826883119312927","25542548114960434192415669117456601176","58074033311342413811708528074702177817","156354493534158514508575082891380273374","214969628370952691540841827419789888756","57947000922596567308920953174130512033","115338438902178924896927901460959755095","298925522054916748398471200540975757167","309986937302843445220244993111067896695","49278384957566386474845589411610443415","304375565020305050345494307985787656357","248064354992889601777371014061056086511","8724631186648362612125521902376482241","286941927591297830538961169344879939166","4224899064433291602629248659039743513","216146416164237824861799873282545240730","275630011976803995010557786185110648425","153273429328423188683144069530068070173","95656914638886947321893087195816541896","133237630580661037046813770509518897459","126772323629642261041955826514029152176","230812591877668241189204091950798368013","213496821169164113274952489161060239151","319354718395048939014751376374965820362","176787837626596345107722248069945362369","160381035017522467669829396179563880948","332078036925899180262188696257634037339","84345166944706388818361778978728504115","20589983014229717052633696128117428436","242910252279576104274704746029971821344","257406200344419014234091824882521082250","335741974886395752229368851214686559898","228504323551413466829775590636420135905","45369199193105075523387341904567446810","232907548996103240276310266144058582239","270410803697185956359834601143098048387","203472872361562332700267889118844975926","57688369053323526136363022120728713209","39427795427570096711807103609857373283","186222229140646690431008889092131675291","318500756731482834285931996005761600235","194835752330882885337418993007986645757"],"threshold":0.9},"id":"CVE-2026-105794-3e75c82a","signature_type":"Line"},{"source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/platform/unittest/PlatformTest.cpp","function":"TEST"},"deprecated":false,"digest":{"function_hash":"35246499858758429590113570444943700145","length":838},"id":"CVE-2026-105794-4316990d","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/core/connection.c"},"deprecated":false,"digest":{"line_hashes":["101965844058963028857030388553504881643","171333103538360201412751063465403915525","277863407262048742721628450424424897077"],"threshold":0.9},"id":"CVE-2026-105794-442234c2","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/inc/msquic_winuser.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["129820918214159512419663885297352662811","121644953499054680218616442055760810272","275090948667734732883589981419340564386","166085876103328609856337044346051814347","238622193195824233049789142931444946938","139130291877641806823876584076162233729","122020005674544876471285062544557729067","36766704928733901300152263218803295211","19921899965424160348611827745289524582"]},"id":"CVE-2026-105794-5268a28a","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["134287597387281311588648302175916193140","132186138653283940297463378953855015675","158173015280156532198007978778530725694","152448937488482967724968453697062646821","116930210547921721611052500710254990045","296698397956707875052861079975354248033","88904634897124980992617243322378705317","280952862152733749023652082319333729475","169410300226803907339940690136500277650","160881442166917667476104159329785513964","157401353499416147580878944492770695126","17241265544844300138108826883119312927","25542548114960434192415669117456601176","58074033311342413811708528074702177817","156354493534158514508575082891380273374","214969628370952691540841827419789888756","57947000922596567308920953174130512033","115338438902178924896927901460959755095","298925522054916748398471200540975757167","309986937302843445220244993111067896695","49278384957566386474845589411610443415","304375565020305050345494307985787656357","248064354992889601777371014061056086511","8724631186648362612125521902376482241","286941927591297830538961169344879939166","4224899064433291602629248659039743513","216146416164237824861799873282545240730","275630011976803995010557786185110648425","153273429328423188683144069530068070173","95656914638886947321893087195816541896","133237630580661037046813770509518897459","126772323629642261041955826514029152176","230812591877668241189204091950798368013","213496821169164113274952489161060239151","319354718395048939014751376374965820362","176787837626596345107722248069945362369","160381035017522467669829396179563880948","332078036925899180262188696257634037339","84345166944706388818361778978728504115","20589983014229717052633696128117428436","242910252279576104274704746029971821344","257406200344419014234091824882521082250","335741974886395752229368851214686559898","228504323551413466829775590636420135905","45369199193105075523387341904567446810","232907548996103240276310266144058582239","270410803697185956359834601143098048387","203472872361562332700267889118844975926","57688369053323526136363022120728713209","39427795427570096711807103609857373283","186222229140646690431008889092131675291","318500756731482834285931996005761600235","194835752330882885337418993007986645757"]},"id":"CVE-2026-105794-54423ec6","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/platform/tls_openssl.c"}},{"deprecated":false,"digest":{"length":838,"function_hash":"35246499858758429590113570444943700145"},"id":"CVE-2026-105794-583b42ab","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/platform/unittest/PlatformTest.cpp","function":"TEST"}},{"source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/inc/msquic_posix.h"},"deprecated":false,"digest":{"line_hashes":["251707576438163550521663111443963740005","59609594808877942310261754672817014277","35451057074958842101594473147763605221","10810917654345454312946645930966824309","21098551185002868153113158035452118809","56203523631195706439103026281162388210","182545982909703673873316885085610295209","321270477329492656115792472385962607093","86465988439136310946258612707233555198","64466772775965064257444744528737298859","289649748809705219468340952964092804969","231906476503029327498225795449399467705","202060107898569489136915154310938436434","1995224525994155780885478770300155229","253157817983072767972898644654711364530","237243420196661750544785344281646780502","155120796032467735334954334762739940474","139994093875159456735350770909050147131","234022933456030125329376440430701450935","84585480669166784231105463414009337748","268029453855139864628574084750313429310","20959372969725980241151813495193130217","206810151013959743855421699402407101713","211733873019726996756893909873869829137","124591249027170919458162108341945946249","139130291877641806823876584076162233729","158696361743146524802421363735164785480","222798938613819185282627353773571690953","146000346275602519424966697268222794596"],"threshold":0.9},"id":"CVE-2026-105794-683d0df3","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/inc/msquic_posix.h"},"deprecated":false,"digest":{"line_hashes":["251707576438163550521663111443963740005","59609594808877942310261754672817014277","35451057074958842101594473147763605221","10810917654345454312946645930966824309","21098551185002868153113158035452118809","56203523631195706439103026281162388210","182545982909703673873316885085610295209","321270477329492656115792472385962607093","86465988439136310946258612707233555198","64466772775965064257444744528737298859","289649748809705219468340952964092804969","231906476503029327498225795449399467705","202060107898569489136915154310938436434","1995224525994155780885478770300155229","253157817983072767972898644654711364530","237243420196661750544785344281646780502","155120796032467735334954334762739940474","139994093875159456735350770909050147131","234022933456030125329376440430701450935","84585480669166784231105463414009337748","268029453855139864628574084750313429310","20959372969725980241151813495193130217","206810151013959743855421699402407101713","211733873019726996756893909873869829137","292132845062366167301885292890697650256","139130291877641806823876584076162233729","122020005674544876471285062544557729067","247814149842132277118377833950303758130","91179368441600999479137103268734767765"],"threshold":0.9},"id":"CVE-2026-105794-6a3c463a","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["129820918214159512419663885297352662811","121644953499054680218616442055760810272","275090948667734732883589981419340564386","57402921360274088164821610776792073909","234935388865274695056856385577819690690","139130291877641806823876584076162233729","122020005674544876471285062544557729067","36766704928733901300152263218803295211","19921899965424160348611827745289524582"],"threshold":0.9},"id":"CVE-2026-105794-7b148e55","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/inc/msquic_winuser.h"}},{"id":"CVE-2026-105794-7c411ecb","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/tls_openssl.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["134287597387281311588648302175916193140","132186138653283940297463378953855015675","158173015280156532198007978778530725694","152448937488482967724968453697062646821","116930210547921721611052500710254990045","296698397956707875052861079975354248033","88904634897124980992617243322378705317","280952862152733749023652082319333729475","169410300226803907339940690136500277650","160881442166917667476104159329785513964","157401353499416147580878944492770695126","17241265544844300138108826883119312927","27507354949264462494454747076716173262","46859846720668100017168985991914510928","88878537726864581545806673105323855588","214969628370952691540841827419789888756","57947000922596567308920953174130512033","115338438902178924896927901460959755095","298925522054916748398471200540975757167","309986937302843445220244993111067896695","49278384957566386474845589411610443415","304375565020305050345494307985787656357","248064354992889601777371014061056086511","8724631186648362612125521902376482241","286941927591297830538961169344879939166","4224899064433291602629248659039743513","216146416164237824861799873282545240730","275630011976803995010557786185110648425","140150338158300021929609786551180246257","240327671693684159670832865980671257130","11347040696622821002662797286170264855","327411238474074873352486301318029006216","126772323629642261041955826514029152176","230812591877668241189204091950798368013","213496821169164113274952489161060239151","319354718395048939014751376374965820362","176787837626596345107722248069945362369","160381035017522467669829396179563880948","332078036925899180262188696257634037339","84345166944706388818361778978728504115","20589983014229717052633696128117428436","242910252279576104274704746029971821344","41163823320181130683159084667994333981","121850271492855407812476394232441621910","335741974886395752229368851214686559898","228504323551413466829775590636420135905","45369199193105075523387341904567446810","232907548996103240276310266144058582239","270410803697185956359834601143098048387","203472872361562332700267889118844975926","57688369053323526136363022120728713209","39427795427570096711807103609857373283","186222229140646690431008889092131675291","318500756731482834285931996005761600235","194835752330882885337418993007986645757"]}},{"deprecated":false,"digest":{"line_hashes":["299964214990148755153283802614028993012","219240874600054579600439534006766008101","209156989857626953868871963463307189880","111485769039753840786039972554009557656","190218353770864346637523539036896700466","314600797881875240397108234105109665760","26297016178078414544572029760626666290","191086191998268412692037727401834985891","97090773644713073263061881752004317101","203943562506893535082775174117921196187","221382792732590671715412439651866751057","300027307845167376286812046828904931260","253506920969205034395977141670965816045","257358840051341002418771858500436501224","4019725094647275963120787967899332174","230741571997413383474459311986378693580","98681090744520427516961749905452385196","192117288067757907511619185703816356390","184384629788808324540621830738140470007","194999157437794135059361257118036124418","337383193794098640246774091699133294734","162909624465611685590763385684924229828","124250535189086347871354155320417446570","68163983275166105148468915038271702069","177103440131296622645786472255604924422","214333339274958117526936670960572328273","294505241641410969370599530711034954089","196089804792954984639278850230946487956","13788112032844990206453997326831945406","97671367406890938511873542511064335748","138799644901775057739026038414930169465","315343420749757240776991045824008298478"],"threshold":0.9},"id":"CVE-2026-105794-871891d5","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/unittest/PlatformTest.cpp"}},{"source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/core/connection.c"},"deprecated":false,"digest":{"line_hashes":["101965844058963028857030388553504881643","171333103538360201412751063465403915525","277863407262048742721628450424424897077"],"threshold":0.9},"id":"CVE-2026-105794-8a9c2800","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["72058718474497528515416304919482204448","65369787361548019507590961843979664288","44901549339198191147823331231685465015","111485769039753840786039972554009557656","190218353770864346637523539036896700466","314600797881875240397108234105109665760","26297016178078414544572029760626666290","191086191998268412692037727401834985891","97090773644713073263061881752004317101","203943562506893535082775174117921196187","221382792732590671715412439651866751057","300027307845167376286812046828904931260","253506920969205034395977141670965816045","257358840051341002418771858500436501224","4019725094647275963120787967899332174","230741571997413383474459311986378693580","98681090744520427516961749905452385196","192117288067757907511619185703816356390","184384629788808324540621830738140470007","194999157437794135059361257118036124418","337383193794098640246774091699133294734","162909624465611685590763385684924229828","124250535189086347871354155320417446570","68163983275166105148468915038271702069","177103440131296622645786472255604924422","214333339274958117526936670960572328273","294505241641410969370599530711034954089","196089804792954984639278850230946487956","13788112032844990206453997326831945406","138427290865554739373703965199200836669","327435282257696423843910495176529325026","214275479646132504952826587747426773484"],"threshold":0.9},"id":"CVE-2026-105794-91fdd1e8","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/platform/unittest/PlatformTest.cpp"}},{"target":{"file":"src/platform/tls_schannel.c"},"deprecated":false,"digest":{"line_hashes":["41963908655349941380833813684761117856","333064803622860034691390137894603014337","339980590131740655377045626796686504946","75062371005928081575537341855740359080","109375097647332121152138583499753990424","295980367592806653620962189705136951411","14639659601737688625689152928986929296","75083627228637525260521312527806567683","248827145322161812996794605986445975218","114554931170169473196954346255542065561","314757289425948598681982063378697320336","12012691289845690947615836674659543830","311334503759430351869052697945625193047","119442598402672957812688592618038234047","135875327149301973782948913487183618233","223027566414782318137082462325947678536","317390850013600331302789356834061101820","41225245849780355017708512970058779585","159693762803874638708444707321830865633","232249739349635737740311073713067649372","96564182953742614390515634261547301147","199378281558255747348664127790883966474","73290711298691617906214941438343106158","234286541112002895002205116442309519731"],"threshold":0.9},"id":"CVE-2026-105794-96021828","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412"},{"target":{"file":"src/inc/msquic_winkernel.h"},"deprecated":false,"digest":{"line_hashes":["238622193195824233049789142931444946938","139130291877641806823876584076162233729","122020005674544876471285062544557729067","247814149842132277118377833950303758130","91179368441600999479137103268734767765"],"threshold":0.9},"id":"CVE-2026-105794-b517e153","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83"},{"deprecated":false,"digest":{"length":3597,"function_hash":"288277525431193426427145868415871652585"},"id":"CVE-2026-105794-b5cd6595","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"function":"CxPlatTlsCertificateVerifyCallback","file":"src/platform/tls_quictls.c"}},{"target":{"file":"src/platform/tls_openssl.c","function":"CxPlatTlsCertificateVerifyCallback"},"deprecated":false,"digest":{"function_hash":"288277525431193426427145868415871652585","length":3597},"id":"CVE-2026-105794-bcc632b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83"},{"digest":{"function_hash":"288277525431193426427145868415871652585","length":3597},"id":"CVE-2026-105794-c3b475ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/platform/tls_quictls.c","function":"CxPlatTlsCertificateVerifyCallback"},"deprecated":false},{"source":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","target":{"file":"src/platform/tls_schannel.c"},"deprecated":false,"digest":{"line_hashes":["41963908655349941380833813684761117856","333064803622860034691390137894603014337","339980590131740655377045626796686504946","75062371005928081575537341855740359080","109375097647332121152138583499753990424","295980367592806653620962189705136951411","14639659601737688625689152928986929296","75083627228637525260521312527806567683","248827145322161812996794605986445975218","114554931170169473196954346255542065561","314757289425948598681982063378697320336","12012691289845690947615836674659543830","311334503759430351869052697945625193047","119442598402672957812688592618038234047","135875327149301973782948913487183618233","223027566414782318137082462325947678536","317390850013600331302789356834061101820","41225245849780355017708512970058779585","159693762803874638708444707321830865633","232249739349635737740311073713067649372","96564182953742614390515634261547301147","199378281558255747348664127790883966474","73290711298691617906214941438343106158","234286541112002895002205116442309519731"],"threshold":0.9},"id":"CVE-2026-105794-c75b162d","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/inc/msquic_winkernel.h"},"deprecated":false,"digest":{"line_hashes":["234935388865274695056856385577819690690","139130291877641806823876584076162233729","122020005674544876471285062544557729067","247814149842132277118377833950303758130","91179368441600999479137103268734767765"],"threshold":0.9},"id":"CVE-2026-105794-d2a465bc","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/inc/msquic_winuser.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["129820918214159512419663885297352662811","127809860542277201792689481790473443932","275461985184883577120949787403418629671","57402921360274088164821610776792073909","234935388865274695056856385577819690690","139130291877641806823876584076162233729","158696361743146524802421363735164785480","76795112692027150459217556721047265030","255458947581843580678996368163936935079"]},"id":"CVE-2026-105794-e2bdf13e"},{"digest":{"line_hashes":["234935388865274695056856385577819690690","139130291877641806823876584076162233729","158696361743146524802421363735164785480","222798938613819185282627353773571690953","146000346275602519424966697268222794596"],"threshold":0.9},"id":"CVE-2026-105794-e59fefd0","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/inc/msquic_winkernel.h"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/platform/unittest/PlatformTest.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["72058718474497528515416304919482204448","65369787361548019507590961843979664288","44901549339198191147823331231685465015","111485769039753840786039972554009557656","190218353770864346637523539036896700466","314600797881875240397108234105109665760","26297016178078414544572029760626666290","191086191998268412692037727401834985891","97090773644713073263061881752004317101","203943562506893535082775174117921196187","221382792732590671715412439651866751057","300027307845167376286812046828904931260","253506920969205034395977141670965816045","257358840051341002418771858500436501224","4019725094647275963120787967899332174","230741571997413383474459311986378693580","98681090744520427516961749905452385196","192117288067757907511619185703816356390","184384629788808324540621830738140470007","194999157437794135059361257118036124418","337383193794098640246774091699133294734","162909624465611685590763385684924229828","124250535189086347871354155320417446570","68163983275166105148468915038271702069","177103440131296622645786472255604924422","214333339274958117526936670960572328273","294505241641410969370599530711034954089","196089804792954984639278850230946487956","13788112032844990206453997326831945406","138427290865554739373703965199200836669","327435282257696423843910495176529325026","164080353862288719091991724240553110152"]},"id":"CVE-2026-105794-e8809eda","signature_type":"Line"},{"digest":{"line_hashes":["41963908655349941380833813684761117856","333064803622860034691390137894603014337","339980590131740655377045626796686504946","75062371005928081575537341855740359080","109375097647332121152138583499753990424","295980367592806653620962189705136951411","14639659601737688625689152928986929296","75083627228637525260521312527806567683","248827145322161812996794605986445975218","114554931170169473196954346255542065561","314757289425948598681982063378697320336","12012691289845690947615836674659543830","311334503759430351869052697945625193047","119442598402672957812688592618038234047","135875327149301973782948913487183618233","223027566414782318137082462325947678536","317390850013600331302789356834061101820","41225245849780355017708512970058779585","159693762803874638708444707321830865633","232249739349635737740311073713067649372","96564182953742614390515634261547301147","199378281558255747348664127790883966474","73290711298691617906214941438343106158","234286541112002895002205116442309519731"],"threshold":0.9},"id":"CVE-2026-105794-eb5773a9","signature_type":"Line","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","target":{"file":"src/platform/tls_schannel.c"},"deprecated":false},{"id":"CVE-2026-105794-ed7f3620","signature_type":"Function","signature_version":"v1","source":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","target":{"file":"src/platform/tls_quictls.c","function":"CxPlatTlsUninitialize"},"deprecated":false,"digest":{"function_hash":"245855617085857939058359048570466545042","length":364}}],"vanir_signatures_modified":"2026-10-07T07:00:28Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}]}